Skip to content
OpenAdvisories

Product · azzaroco

Indeed Ultimate Learning Pro

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.9

    Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter

    The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio…